Protecting a Microsoft System Center Configuration Manager 2007 site system means that clients outside of the protected boundaries will be unable to access the distribution point or state migration point roles on that site system. Protection is applied to the entire site system, not just to the properties of the site role. However, protection has no effect on any site system roles except distribution points and state migration points.